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Top Stories 

• Four of New Jersey’s electric utility companies were cited by the New Jersey Board of 
Public Utilities January 24 and told to improve their communications systems and training 
after an investigation into the Hurricane Irene response in 201 1 . - Bridgewater Courier - 
News (See item 1) 

• Federal prosecutors announced January 1 1 that two employees from an Albany machine 
product firm pleaded guilty to bribing a public official and over charging the U.S 
Department of Defense more than $900,000. - ATLAW (See item 3) 

• The Russian national who developed and distributed the Gozi banking malware was 
charged along with two co-conspirators with various counts of fraud and unauthorized 
access related to their malware’ s infection of over a million computers to obtain customers’ 
banking credentials. - Wired.com (See item 7) 

• Cenex Harvest States Inc. pleaded guilty and was fined $500,000 for the improper release 
of chemicals and exposing hundreds of cattle to hazardous smoke during a Great Falls fire 
in 2009. - Associated Press (See item 14 ) 
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Energy Sector 

1 . January 23, Bridgewater Courier-News - (New Jersey) NJ utilities told to improve 
communication in blackouts. Four of New Jersey’s electric utility companies were 
cited by the New Jersey Board of Public Utilities January 24 when the board stated that 
utility companies should improve their communications systems and training after an 
investigation into the Hurricane Irene response in 201 1 . 

Source: http://www.mvcentraliersev.com/article/20130123/NJBIZ/301230044/NJ- 
utilities-told-to-improve-communication-in-blackouts?nclick check=l 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

2. January 24, Beaver County Times - (Pennsylvania) Nuke plant worker fired over 
snubbers violation, plant cited by NRC. The U.S. Nuclear Regulatory Commission 
(NRC) cited FirstEntergy Corporation the week of January 21 after a Beaver Valley 
plant employee failed to report a missing safety check for snubbers, which are used to 
protect steam pipes during earthquakes and other emergencies. The NRC claims the 
worker overlooked one snubber during an inspection at the Pittsburgh plant, and did not 
report the mistake until an audit uncovered it a year afterwards. 

Source: http://www.timesonline.com/news/local news/nuke-plant-worker-fired-over- 
snubbers-violation-plant-cited-by/article dle!63f3-639f-5fe0-b77c- 
8d05c4905e76.html 
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Critical Manufacturing Sector 

See item 32 
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Defense Industrial Base Sector 

3. January 11, ATLAW - (Georgia) Albany military contractors plead guilty to 
bribery. Federal prosecutors announced January 1 1 that two employees from an 
Albany machine product firm pleaded guilty to bribing a public official and over 
charging the U.S Department of Defense more than $900,000. 

Source: http://www.atlawblog.com/2013/01/albany-military-contractors-plead-guilty- 
to-bribery/ 
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Banking and Finance Sector 

4. January 23, Albany Tribune - (Oregon) Serial robbery suspect “Dopey the Bandit” 
in custody. A suspect believed to be the bank robber known as “Dopey the Bandit” 
was arrested in Portland. He is suspected of 1 1 robberies, 4 of which targeted financial 
institutions. 

Source: http://www.albanytribune.com/230 12013 -serial -robbery-suspect-dopey-the- 
bandit-in-cu stody/ 

5. January 23, WBTV 3 Charlotte - (North Carolina) Charlotte woman sentenced to 
federal prison for mail fraud. A former manager at an insurance company was 
sentenced for defrauding her employer of around $730,000 over 6 years by creating 
duplicates of checks paid to underwriter companies and depositing them into a personal 
bank account. 

Source: http://www.wbtv.com/story/20661255/charlotte-woman-sentenced-to-federal- 
prison-for-mail-fraud 

6. January 23, Out-Law News - (International) Most banks experienced DDoS attacks 
last year, according to Ponemon Institute survey. A report by the Ponemon Institute 
revealed that 64 percent of 650 banking IT professionals surveyed said a distributed 
denial of service (DDoS) attack targeted their institutions in 2012. The survey also 
measured responses on the ability of banks to prevent DDoS attacks and barriers to 
preventing attacks. 

Source: http://www.out-law.com/en/articles/2013/ianuary/most-banks-experienced- 
ddos-attacks-last-year-according-to-ponemon-institute-survey/ 

7. January 23, Wired.com - (International) Mastermind behind Gozi bank malware 
charged along with two others. The Russian national who developed and distributed 
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the Gozi banking malware was charged along with two co-conspirators with various 
counts of fraud and unauthorized access related to their malware’s infection of over a 
million computers to obtain customers’ banking credentials. 

Source: http://www.wired.com/threatlevel/2013/01/mastermind-behind-gozi-charged/ 

8. January 23, Federal Bureau of Investigation - (California) Owner of Elk Grove 
mortgage business convicted in massive mortgage fraud scheme. The owner and 
principal operator of Liberty Real Estate and Investment Company was found guilty in 
a Sacramento court of submitting falsified documents for buyers in real estate 
transactions, almost all of which went into foreclosure, costing lending institutions 
more than $5.5 million. 

Source: http://www.loansafe.org/owner-of-elk-grove-mortgage-business-convicted-in- 
massive-mortgage-fraud-scheme 
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Transportation Sector 

9. January 24, Associated Press - (Maine; New Hampshire) Frozen or not, bridge still 
stuck. The Sarah Long Bridge between Portsmouth, New Hampshire, and Kittery, 
Maine, failed to fully close and became stuck, causing traffic backups January 23. 
Source: http://www.pressherald.com/news/rnaine-new-harnpshrre-bridge-stuck- 
work.html 

10. January 24, WNEM 5 Bay City - (Michigan) All lanes of SB 1-75 over Zilwaukee 
Bridge back open. Several accidents were reported throughout Michigan due to snowy 
driving conditions, including a crash on Interstate 75 in Saginaw County. Police closed 
the highway for about 3 hours as a precaution. 

Source: http://www.wnem.com/story/20667449/accident-on-zilwaukee-bridge-slowing- 
traffic-on-i-75 
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Postal and Shipping Sector 

11. January 23, Dallas Morning News - (Texas) Feds continue crackdown of mail theft 
in Dallas using ‘fishing’ devices. Federal agents are increasing surveillance on Dallas- 
area post offices to crack down on thieves “fishing” mailboxes, a new mail-theft 
technique that has become popular in the Dallas-Forth Worth area. 

Source: http://crimeblog.dallasnews.com/2013/01/feds-continue-crackdown-of-mail- 
theft-in-dallas-using-fishing-devices.html/ 

12. January 23, Maysville Ledger Independent - (Ohio) Adams County men arrested for 
mail theft. Two men were arrested after following a postal worker and stealing 
recently delivered mail, clothes, and credit cards from mailboxes. 

Source: http://www.mavsville-online.com/news/local/adams-county-men-arrested-for- 
mail-theft/article 634df46b-336b-582f-8bd3-9f0e9eelca20.html 
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13. January 23, DesMoines Register - (Iowa) Fraudulent checks traced to mail 

theft. Numerous cases of fraudulently cashed checks are being traced to mail theft in 
Des Moines. 

Source: 

http://www.desmoinesregister.com/article/20130124/NEWS01/301240072/10Q2/Fraud 

ulent-checks-traced-mail-theft 
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Agriculture and Food Sector 

14. January 23, Associated Press - (Montana) Cenex fined $500K for Malta chemical 
release. Cenex Harvest States Inc. pleaded guilty and was fined $500,000 for the 
improper release of chemicals and exposing hundreds of cattle to hazardous smoke 
during a Great Falls fire in 2009. 

Source: http://www.businessweek.com/ap/2013-01-23/cenex-fined-500k-for-malta- 
chemical-release 
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Water Sector 

15. January 24, Erie Times-News - (Pennsylvania) Thousands affected by Erie-area 
water main break. A water main break affected thousands of Erie Water Works 
customers while 12 crews attempted to find the source of the break January 23. Due to 
sanitation concerns, students at a local school were released early. 

Source: http://www.goerie.com/article/20130124/NEWS02/301239903/Thousands- 
affected-by-Erie-area-water-main-break 

16. January 23, Minnesota Public Radio - (Minnesota) Tab for Minneapolis water main 
break: $325,000. Minneapolis paid $325,000 to fix a 36-inch water pipe that broke 
January 4. Repair crews reported that the pipe was old, but otherwise in good working 
order. 

Source: http://rninnesota.publicradio.org/display/web/2013/01/23/news/minneapolis- 
water-main-break-cost 

17. January 23, Southern Illinoisan - (Illinois) De Soto main break and boil order. A 
water main break January 23 left the village of De Soto under a boil order. 

Source: http://thesouthern.com/news/local/boil-orders/de-soto-main-break-and-boil- 
order/article_2 1 1 1369e-6587-l Ie2-9710-001a4bcf887a.html 
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For another story, see item 20 



Public Health and Healthcare Sector 



18. January 24, Stanford Daily - (California) Laptop theft compromises Packard 
hospital information. A Lucile Packard Children’s Hospital laptop containing medical 
records of up to 57,000 was stolen from a physician’s car January 9, the hospital 
announced. 

Source: http://www.stanforddaily.corn/2013/01/24/laptop-theft-comprornises-packard- 
hospital-information/ 

19. January 23, WSAZ 3 Charleston - (West Virginia) Health care clinic evacuated after 
fire, seniors displaced. A healthcare clinic has been closed and an adjacent senior 
living center evacuated in Clendenin after faulty wiring in the clinic lead to an 
electrical fire. 

Source: http://www.wsaz.com/news/headlines/Senior-Citizens-Evacuated-after- 
Electrical-Fire-188070581 .html 
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Government Facilities Sector 

20. January 23, Sioux City Journal - (South Dakota) Vermillion, S.D., water main break 
displaces students for 3rd day. Around 500 students at the University of South 
Dakota were displaced for the third day in a row after a water main break damaged 
their dorm January 21 and damaged the building’s electrical system. 

Source: http://siouxcityiournal.com/news/local/vermillion-s-d-water-main-break- 
displaces-students-for -rd/article 33b20168-9978-55bd-9b24-0278dc823791.html 

21. January 23, KREM 2 Spokane - (Washington) Parents pick up students early after 
explosions at Ferris. Two chemical bombs exploded at Ferris High School January 23. 
School officials decided to close the school for the rest of the day while school resource 
officers searched the building. 

Source: http://www.krem.com/news/local/Parents— 188128281.html 
For another story, see item 15 
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Emergency Services Sector 

22. January 23, WNCT 9 Greenville; WFMY 2 Greensboro - (North Carolina) Police car 
stolen by teenager who crashed it into a house. A young adult faced several charges 
after he struck a Jacksonville Police officer, stole his police vehicle, and crashed the 
vehicle into a home. 

Source: http://www.digtriad.com/news/local/article/264983/57/Police-Teen-Steals- 
Officers-Car-Crashes-It-Into-A-House 
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Information Technology Sector 



23. January 24, Krebs on Security - (International) Backdoors found in Barracuda 
Networks gear. Various spam filters, firewalls, and VPN appliances sold by Barracuda 
Networks contain undocumented backdoor accounts that could be remotely accessed 
via secure shell (SSH) and are accessible to hundreds of non-Barracuda companies, the 
vendor acknowledged. 

Source: http://krebsonsecurity.com/2013/01/backdoors-found-in-barracuda-networks- 
gcar/ 

24. January 23, Softpedia - (International) Microsoft addresses XSS vulnerability on 
Delish. Microsoft fixed a cross-site scripting (XSS) vulnerability on its Delish cooking 
Web site after the issue was reported by a researcher. 

Source: http://news.softpedia.com/news/Microsoft-Addresses-XSS-Vulnerability-on- 
Delish-323618.shtml 

25. January 23, InformationWeek - (International) Security flaws leave networked 
printers open to attack. A security researcher discovered flaws in Hewlitt-Packard’s 
JetDirect printer networking software which can be used to bypass security controls, 
disable printers, or reprint previous documents. 

Source: http://www.informationweek.com/security/vulnerabilities/security-flaws-leave- 
networked-printers/240 146805 

For another story, see item 7 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 



26. January 24, WJZ 13 Baltimore - (Maryland) Firefighters battle 3-alarm fire in 
downtown Baltimore. Baltimore firefighters responded to a 3 -alarm fire at a three 
story commercial and residential facility January 24. 

Source: http://baltimore.cbslocal.com/2013/01/24/breaking-news-firefighters-are- 
battling-a-three-alarm-fire/ 
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27. January 24, Middletown Times Herald-Record - (New York) Kiryas Joel fires leave 
at least 50 displaced. Two separate fires displaced over 50 residents in Kiryas Joel 
January 24. One of the fires was a 5-alarm and electrical problems are suspected at both 
incidents. 

Source: 

http://www.recordonline.com/apps/pbcs.dll/article? AID=/201 30 124/NEWS/30 1240333 

28. January 24, WCTI 12 New Bern - (North Carolina) Craven County gas leak closes 
local business and major road. A gas leak in New Bern January 24 required 
emergency crews to shut down a local road and close 10 businesses in the area so crews 
could fix the leak. 

Source: http://www.wctil2.com/news/Craven-County-gas-leak-closes-local-business- 
and-maior-road/-/13530444/18260002/-/clo0v6z/-/index.html 

29. January 24, DNAinfo - (New York) Massive fire displaces families from 
Amsterdam Ave. apartment building. Around 10 apartments received fire damage 
while many others were damaged by water from firefighters who extinguished a large 
fire in New York City January 23. A total of four firefighters were injured as well as 
one resident. 

Source: http://www.dnainfo.com/new-vork/20130124/washington-heights/four-alarm- 
fire-breaks-out-amsterdam-avenue-apartment-building 

30. January 23, WRIC 8 Petersburg - (Virginia) Smell of gas causes evacuation of 
Henrico shopping center. A HAZMAT team along with other Virginia authorities 
responded to a potential gas leak in Henrico January 23. The shopping center where the 
event occurred was closed for about 4 hours. 

Source: http://www.wric.com/story/20663965/smell-of-gas-causes-evacuation-of- 
shopping-center 

3 1 . January 23, Northwest Tennessee Today - (Tennessee) Hickman’s West Baptist 
Church gutted by fire. A fire January 23 destroyed the large West Baptist Church in 
Hickman. 

Source: http: //www. nwtntoday . com/news .php?viewStory=7965 1 

32. January 23, Bergen County Record - (New Jersey) Sparks blamed in 4-alarm fire at 
north Arlington metal shop. Firefighters put down a 4-alarm fire at a north Arlington 
metal-working facility and shop January 23. They managed to evacuate more than 15 
workers before the roof collapsed. 

Source: http://www.northiersey.com/news/north arlington fire.html 



National Monuments and Icons Sector 



Nothing to report 
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Dams Sector 

33. January 24, West Side Leader - (Ohio) Two Cuyahoga River dams slated for 
demolition. The Sheraton and LeFever dams, originally built to provide power in 
Cuyahoga Falls, will be torn down over the summer of 2013 in order to improve 
environmental quality in the Cuyahogo River and reduce community safety concerns. 
Source: http://www.akron.com/akron-ohio-communi ty-news.asp?a!D= 18321 
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NTAS 



NO ACTIVE ALERTS 

www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs. gov/IPDail yReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703)387-2341 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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